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CLIENT COMPUTER AND SERVER I 
COMPUTER INITIALIZE | 
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OPERATING SYSTEM VERIFIES THAT KERNEL 
SOFTWARE ELEMENTS; ARE GENUINE 
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SUBNET MANAGEMENT SOFTWARE 
DETECT FABRIC AND ALLOCATE 
PARTITION, ID AND PATH 








INITIALIZATION 
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APPLICATION PASSES A REQUEST AND 
CREDENTIALS TO IFF ON CLIENT MACHINE 
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v i IFF OF CLIENT MACHINE REQUESTS A i 
H TOKEN FROM AN AUTHENTICATION SERVICE ! 
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ON CLIENT MACHINE, IFF REQUESTS 
A CONNECTION FROM COMMUNICATION 
MANAGER (IN KERNEL AGENT) 
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MANAGER 


OF 


CLIENT 


REQUESTS THE 


CONNECTION 


FROM 


COMMUNICATION 


MANAGER 


OF 


SERVER 



ON SERVER MACHINE, COMMUNICATION 
MANAGER PASSES A REQUEST TO IFF 



CONNECTION 
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FIG.4A 
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IFF OF SERVER DETERMINES WHETHER 
THE SOURCE IS AUTHORIZED AND 
WHETHER THE TOKEN IS GENUINE . 
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SERVER MACHINE RESPONDS TO 
THE REQUEST OF CLIENT MACHINE 
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APPLICATION OF CLIENT ISSUES A 
TRANSACTION FROM APPLICATION OF 
SERVER WITHOUT KERNEL INTERVENTION 





IFF OF CLIENT SENDS A TRANSACTION 
TO APPLICATION OF SERVER. IFF MAY 
ALSO SEND A SESSION TOKEN TO 
IFF OF SERVER 
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IFF OF SERVER RECEIVES THE 
TRANSACTION AND CHECKS THE TOKEN 
AND THE TRANSACTION ACCORDING TO 
A PREDEFINED SECURITY POLICY 
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IF AUTHORIZED, IFF OF SERVER 
TRANSFERS THE TRANSACTION TO 
THE APPLICATION OF THE SERVER ' 
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FIG.4B 



